3 ms·
This looks like a collection of startups whose web site is vulnerable to click jacking [1]: they all allow to be embedded in an iframe. [1] https://en.wikipedi
by fooyc 12y ago
This looks like a collection of startups whose web site is vulnerable to click jacking [1]: they all allow to be embedded in an iframe.
[1] https://en.wikipedia.org/wiki/Clickjacking https://en.wikipedia.org/wiki/Clickjacking
- gohrt 12y agoSeems crazy that sites need to individually opt in to anti-Clickjacking with CSP, instead of modern browsers disabling it by default. In other cases, the default is to not let a page mix origins: http://en.wikipedia.org/wiki/Same-origin_policy#Cross-Origin_Resource_Sharing http://en.wikipedia.org/wiki/Same-origin_policy#Cross-Origin...